diff --git a/docs/Getting Started/openSUSE/openSUSE Leap Root on ZFS.rst b/docs/Getting Started/openSUSE/openSUSE Leap Root on ZFS.rst
index e0f1488fe..3c0766e4f 100644
--- a/docs/Getting Started/openSUSE/openSUSE Leap Root on ZFS.rst	
+++ b/docs/Getting Started/openSUSE/openSUSE Leap Root on ZFS.rst	
@@ -692,13 +692,27 @@ Step 5: System Configuration
 
    **Note:** If you installed `base` pattern, you need to deinstall busybox-grep to install `kernel-default` package.
 
-#. Install ZFS in the chroot environment for the new system::
+#. Install ZFS in the chroot environment for the new system
+
+   .. code-block:: text
 
      zypper install lsb-release
      zypper addrepo https://download.opensuse.org/repositories/filesystems/`lsb_release -rs`/filesystems.repo
      zypper refresh   # Refresh all repositories
      zypper install zfs zfs-kmp-default
 
+   Note that if your system uses UEFI with Secure Boot, since openSUSE Leap
+   15.2 the kernel requires all kernel modules to be signed. The ZFS kernel
+   module built in the ``filesystems`` project *is* signed, but not with the
+   official openSUSE key that was automatically registered with your system
+   when you first booted into openSUSE. In order to make sure that your system
+   trusts the ``filesystems`` signing key, make sure to install the
+   ``zfs-ueficert`` package as well::
+
+     zypper install zfs-ueficert
+
+   On the next boot, you will be prompted by the MOK to enroll the new key.
+
 #. For LUKS installs only, setup ``/etc/crypttab``::
 
      zypper install cryptsetup
diff --git a/docs/Getting Started/openSUSE/openSUSE Tumbleweed Root on ZFS.rst b/docs/Getting Started/openSUSE/openSUSE Tumbleweed Root on ZFS.rst
index 2719502e9..bce00c9ea 100644
--- a/docs/Getting Started/openSUSE/openSUSE Tumbleweed Root on ZFS.rst	
+++ b/docs/Getting Started/openSUSE/openSUSE Tumbleweed Root on ZFS.rst	
@@ -677,12 +677,25 @@ Step 5: System Configuration
 
    .. note:: If you installed `base` pattern, you need to deinstall busybox-grep to install `kernel-default` package.
 
-#. Install ZFS in the chroot environment for the new system::
+#. Install ZFS in the chroot environment for the new system
+
+   .. code-block:: text
 
      zypper addrepo https://download.opensuse.org/repositories/filesystems/openSUSE_Tumbleweed/filesystems.repo
      zypper refresh   # Refresh all repositories
      zypper install zfs
 
+   Note that if your system uses UEFI with Secure Boot, since Linux 5.4 the
+   kernel requires all kernel modules to be signed. The ZFS kernel module built
+   in the ``filesystems`` project *is* signed, but not with the official
+   openSUSE key that was automatically registered with your system when you
+   first booted into openSUSE. In order to make sure that your system trusts
+   the ``filesystems`` signing key, make sure to install the ``zfs-ueficert``
+   package as well::
+
+     zypper install zfs-ueficert
+
+   On the next boot, you will be prompted by the MOK to enroll the new key.
 
 #. For LUKS installs only, setup ``/etc/crypttab``::